#8673 IPA should obey SUB_UID_MAX / SUB_GID_MAX for random id ranges
Opened 3 years ago by cheimes. Modified 3 years ago

Issue.

/etc/login.defs defines ranges for subuids and subgids. The default ranges on Fedora conflict with possible ranges in FreeIPA.

SUB_UID_MIN                100000
SUB_UID_MAX             600100000
SUB_UID_COUNT               65536

SUB_GID_MIN                100000
SUB_GID_MAX             600100000
SUB_GID_COUNT               65536

FreeIPA uses a random interval of 199,999 in the range of random.randint(1, 10000) * 200000.

SUB_UID_MIN = 100_000
SUB_UID_MAX = 600_100_000

IPA_UID_MIN = 200_000
IPA_UID_MAX = 2_000_199_999

Login to comment on this ticket.

Metadata